CVE-2008-4586 Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and ex...
HighCVSS 9.3
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acresso flexnet connect | = 6.1 | No fix listed |
References
- 28496 third-party-advisory vendor-advisory
- 4425 third-party-advisory
- 27279 exploit vdb-entry
- ADV-2008-0145 vdb-entry
- 4913 exploit